Data Access Control Analyst

Reap is looking for a Data Access Control Analyst to run access reviews, enforce client-data segregation, and maintain audit-ready controls.

You will maintain a register of Payward-affiliated identities and map their access across systems holding client data. You will run monthly access certifications, document findings and exceptions, maintain access audit logs, and produce monthly reports. You will configure SIEM alerts, manage relevant DSARs, maintain data-classification labels, and update GDPR Article 30 ROPA entries for changing data flows.

• Maintain a register of Payward-affiliated personnel and map their access rights across relevant systems
• Run monthly access certification reviews and document findings and exceptions
• Build and maintain client-data access audit logs
• Produce monthly access reports for the Data Governance Manager and CISO
• Configure SIEM alerts for Payward-affiliated access attempts
• Manage DSARs involving client data with the external DPO
• Maintain data-classification labels across systems holding client data
• Update GDPR Article 30 ROPA entries when client-data flows change

• Experience running user-access review and certification processes
• IAM platform experience, with Okta strongly preferred
• SQL or equivalent experience querying access logs and building reports
• Knowledge of GDPR Article 28 and data-access breach fundamentals
• Evidence-management experience and ability to build regulatory-quality audit trails
• Financial-services experience with partner data-segregation obligations is preferred
• PDPA or PDPO operational experience is preferred
• Microsoft Purview labelling or similar DLP tooling experience is preferred
• Access-certification tooling experience such as Sailpoint or Saviynt is preferred

• Annual leave and public holidays
• Health insurance budget
• Flexible remote work options
• Home office equipment budget
• Corporate Reap Card